Re: [SM-USERS] Users can login with old passwords!

[Paul L. <pa...@sq...>]

On Tue, Jun 22, 2010 at 10:34 AM, Dogsbody <da...@do...> wrote:
>
>>> Nope, no IMAP proxy, the IMAP server and Squirrelmail are on the same
>>> machine.
>>
>> That alone doesn't rule out the use of an IMAP proxy, since it could
>> also be on the same machine.
>
> Totally agree, sorry my bad sentence.  I built the box myself and it is
> not running an IMAP proxy.
>
>> I can think of no other reason that an old password would continue to
>> work.  Squirrelmail does not (in fact, can not) remain connected to your
>> IMAP server.
>
> That is what I thought but it is happening :-/  I'll happily provide a
> test account for any developers that want to try this themselves.
>
> I'm at rather a loss on this one.

Dave's right.  SquirrelMail can't cache logins itself.  It merely asks
your IMAP server to authenticate what credentials you give it.
Therefore your problem is with whatever IMAP service you have pointed
SquirrelMail to, be it an IMAP proxy or the IMAP server itself.  If
you are really not running imapproxy, then my guess is that Dovecot is
not seeing the updated passwords yet.  You should seek help in the
Dovecot community for this issue.

-- 
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php